PT-2017-7035

Name of the Vulnerable Software and Affected Versions Wolf CMS versions prior to 0.8.3.1 Description The issue allows for unrestricted file upload and PHP code execution due to improper validation of the filename parameter in the file manager, accessible at the "admin/plugin/file manager/browse/"...

CVE-2017-7357: Unrestricted Upload of File with Dangerous Type

Hipchat Server before 2.2.3 allows remote authenticated users with Server Administrator level privileges to execute arbitrary code by importing a file...

PT-2017-2023

Name of the Vulnerable Software and Affected Versions Vtiger CRM version 6.4.0 Description The issue is related to an unrestricted file upload vulnerability in the Settings Vtiger CompanyDetailsSave Action class. This allows remote authenticated users to execute arbitrary code by uploading a...

CVE-2017-7281

An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport functions in recoveryconsole/bpl/reports.php allows for an authenticated user to create a randomly named file on disk with a user-controlled extension,...

CVE-2017-7281

An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport functions in recoveryconsole/bpl/reports.php allows for an authenticated user to create a randomly named file on disk with a user-controlled extension,...

CVE-2017-7281

An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport functions in recoveryconsole/bpl/reports.php allows for an authenticated user to create a randomly named file on disk with a user-controlled extension,...

CVE-2017-7281: Unrestricted Upload of File with Dangerous Type

An issue was discovered in Unitrends Enterprise Backup before 9.1.2. A lack of sanitization of user input in the createReportName and saveReport functions in recoveryconsole/bpl/reports.php allows for an authenticated user to create a randomly named file on disk with a user-controlled extension,...

Unitrends < 9.1.2 Multiple Vulnerabilities

Unitrends is prone to multiple vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2017-7695

Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.phpspace' file, they could bypass a safety check and execute any code...

CVE-2017-7695

BigTree CMS

PT-2017-17893

Name of the Vulnerable Software and Affected Versions BigTree CMS versions prior to 4.2.17 Description The issue allows for Unrestricted File Upload, enabling an attacker to bypass safety checks by uploading a file named 'xxx.phpspace'. This could lead to the execution of arbitrary code...

CVE-2017-7695: Unrestricted Upload of File with Dangerous Type

Unrestricted File Upload exists in BigTree CMS before 4.2.17: if an attacker uploads an 'xxx.phpspace' file, they could bypass a safety check and execute any code...

CVE-2015-3884

qdPM contains an unrestricted file upload vulnerability (affecting 8.3 and earlier) that lets remote attackers upload executable files and access them via uploads/attachments/ or uploads/users/ to achieve RCE. The issue arises from allowing executable extensions and direct file access; Metasploit...

CVE-2015-3884: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in the 1 myAccount, 2 projects, 3 tasks, 4 tickets, 5 discussions, 6 reports, and 7 scheduler pages in qdPM 8.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the...

b2evolution 6.8.8 Shell Upload Vulnerability

b2evolution version 6.8.8 Stable suffers from a remote shell upload vulnerability. Exploit Title: Remote File Upload Vulnerability in b2evolution 6.8.8 Google Dork: no Date: 14-03-2017 Exploit Author: @runggareksya, @dvnrcy, @yokoacc Vendor Homepage: http://b2evolution.net Software Link:...

Trendmicro InterScan 6.5-SP2_Build_Linux_1548 Remote Root Vulnerability

Exploit for windows platform in category remote exploits Title: Trendmicro InterScan Remote Root Access Vulnerability Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2017-003.txt 1. Vulnerability Details Affected Vendor: Trendmicro Affected Product: InterScan Web Security...

CVE-2016-8921: Unrestricted Upload of File with Dangerous Type

IBM FileNet WorkPlace XT could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server...

CVE-2016-6124: Unrestricted Upload of File with Dangerous Type

IBM Kenexa LMS on Cloud 13.1 and 13.2 - 13.2.4 could allow a remote attacker to upload arbitrary files, which could allow the attacker to execute arbitrary code on the vulnerable server...

PT-2017-3178

Name of the Vulnerable Software and Affected Versions SageCRM versions 7.x through 7.3 SP2 Description The issue is related to the Component Manager functionality in SageCRM, which allows additional components to be added to the application. This functionality is vulnerable to unrestricted file...

CVE-2017-5520: Unrestricted Upload of File with Dangerous Type

The media rename feature in GeniXCMS through 0.0.8 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to rename and execute files with the .php6, .php7 and .phtml extensions...